From owner-freebsd-questions@FreeBSD.ORG Fri Aug 26 21:09:40 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E31BE1065686 for ; Fri, 26 Aug 2011 21:09:40 +0000 (UTC) (envelope-from jhall@socket.net) Received: from mf1.socket.net (mf1g.socket.net [216.106.88.71]) by mx1.freebsd.org (Postfix) with ESMTP id C166B8FC12 for ; Fri, 26 Aug 2011 21:09:39 +0000 (UTC) Received: from localhost (unknown [216.106.88.17]) by mf1.socket.net (Postfix) with SMTP id 5D84A40424; Fri, 26 Aug 2011 16:09:39 -0500 (CDT) To: mike@sentex.net From: jhall@socket.net X-Apparently-from: jhall@mail.socket.net X-Remote-Host: 174.34.27.163 User-Agent: Socket WebMail References: <20110823232242.B78A5106566B@hub.freebsd.org> <4E545899.6090800@sentex.net> <20110825155205.A0D131065670@hub.freebsd.org> <4E5696D0.3000205@sentex.net> <201108261742.p7QHgS2H095637@smtp1.sentex.ca> <4E57E2B1.9000508@sentex.net> <201108261840.p7QIebBP015777@smtp2.sentex.ca> <4E57EBED.7070900@sentex.net> <201108262052.p7QKqoTE002569@smtp2.sentex.ca> <4E5809A3.6020306@sentex.net> Date: Fri, 26 Aug 2011 16:09:39 -0500 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Message-Id: <20110826210940.E31BE1065686@hub.freebsd.org> Cc: freebsd-questions@freebsd.org Subject: Re: Re: Racoon to Cisco ASA 5505 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: jhall@socket.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Aug 2011 21:09:41 -0000 > Yes, post that to the list. > I am not sure if this is the entire configuration or not, but this is what they have posted. crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 crypto map rackmap 201 match address 201 crypto map rackmap 201 set peer Jefferson_City crypto map rackmap 201 set transform-set ESP-3DES-SHA crypto map rackmap interface outside crypto isakmp identity address crypto isakmp enable outside crypto isakmp policy 10 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 access-list 201 line 1 extended permit ip 192.168.100.0 255.255.252.0 10.129.10.0 255.255.255.0 access-list 201 line 2 extended permit ip 192.168.100.0 255.255.252.0 10.129.20.0 255.255.255.0 access-list 201 line 3 extended permit ip 192.168.100.0 255.255.252.0 10.129.30.0 255.255.255.0 access-list 201 line 4 extended permit ip 192.168.100.0 255.255.252.0 10.129.50.0 255.255.255.0 access-list 201 line 5 extended permit ip 192.168.100.0 255.255.252.0 10.129.60.0 255.255.255.0 access-list 201 line 6 extended permit ip 192.168.100.0 255.255.252.0 10.129.70.0 255.255.255.0 access-list 201 line 7 extended permit ip 192.168.100.0 255.255.252.0 10.129.80.0 255.255.255.0